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UNCLASSIFIED DECLARATION OF FRANCES J. FLEISCH 


2 


NATIONAL SECURITY AGENCY 


J 

4 

C 


I, Frances J. Fleisch, do hereby state and declare as follows: 


J 

6 


I. INTRODUCTION 


7 


1 . lam the Acting Deputy Director for the National Security Agency (“NSA” or 


8 


“Agency”), an intelligence agency within the Department of Defense. I have held this position 


9 


since December 9, 201 3. Prior to holding the position of Acting Deputy Director, I was the 


10 


Agency’s Executive Director from June 2010 to December 8, 2013. Before moving into the 


11 


Executive Director position, I served in a number of leadership and management positions since 


12 


joining the agency in 1980. As Acting Deputy Director, 1 serve as the senior civilian leader of 


13 


the NSA and act as the Agency’s chief operating officer, responsible for guiding and directing 


14 


strategies, operations, and policy. Under our internal regulations, and in the absence of the 


15 


Director of the NSA, I am responsible for directing the NSA, overseeing the operations 


16 


undertaken to carry out its mission and, by specific charge of the President and the Director of 


17 


National Intelligence, protecting NSA activities and intelligence sources and methods. 1 have 


18 


been designated an original TOP SECRET classification authority under Executive Order (“EO”) 


19 


No. 13526, 75 Fed. Reg. 707 (2009), and Department of Defense Manual No. 5200.1, Vol. 1, 


20 


Information and Security Program (Feb. 24, 2012). 


21 


2. The purpose of this declaration is to support an assertion of the military and state 


22 


secrets privilege (hereafter, “state secrets privilege”) by the Director of National Intelligence 


23 


(“DNI”) as the head of the Intelligence Community, as well as the DNI’s assertion of a statutory 


24 


privilege under the National Security Act, to protect information related to the NSA activities 


25 


described below that may be necessary to adjudicate the claims at issue in this litigation. 


26 


Through this declaration, 1 also hereby invoke and assert the NSA’s statutory privilege set forth 
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1 


in Section 6 of the National Security Agency Act of 1959, Public Law No. 86-36 (codified at 50 


2 


U.S.C. 3601 et seq.) (“NSA Act”), to protect the information related to the NSA activities 


3 


described herein below. General Keith B. Alexander, the Director of the NSA, has been sued in 


4 


his official and individual capacities in the above-captioned litigation and has recused himself 


5 


from the decision on whether to assert privilege in his official capacity. As the Acting Deputy 


6 


Director, and by specific delegation of the Director, I am authorized to review the materials 


7 


associated with this litigation, prepare whatever declarations I determine are appropriate, and 


8 


determine whether to assert the NSA’s statutory privilege. The statements made herein are based 


9 


on my personal knowledge of NSA activities and operations, and on information made available 


10 


to me as the Acting Deputy Director of the NSA. Contemporaneous with this declaration, 1 have 


11 


executed a classified declaration solely for the Court’s in camera, ex parte review, concerning 


12 


the same matters addressed in this public declaration. 


13 


II. SUMMARY 


14 


3. In the course of my official duties, 1 have been advised that plaintiffs in this 


15 


litigation allege that, following the terrorist attacks of September 1 1, 2001 , the NSA, pursuant to 


16 


presidential authorization and with the assistance of plaintiffs’ telecommunications companies 


17 


(namely, AT&T and Verizon), indiscriminately intercepted the content and obtained the 


18 


communications records of millions of ordinary Americans as part of an alleged “dragnet” 


19 


communications surveillance. The Government has previously asserted the state secrets 


20 


privilege in these cases, most recently in September 2012, to protect from disclosure highly 


21 


sensitive intelligence-gathering information relevant to confirming or negating plaintiffs’ 


22 


allegations. This declaration responds to the Court’s order that the Government explain the 


23 


impact of recent official disclosures about NSA intelligence-gathering activities on the national 
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security issues in the litigation, as reflected in its state secrets privilege assertion. July 23, 2013 
Amended Order (ECF No. 153 at 25); Sept. 27, 2013 Transcript of Proceedings at 7. 1 

4. The Government’s recent official disclosures follow a series of unprecedented, 
unauthorized, and unlawful disclosures, by a former NS A contractor, of lop Secret documents 
concerning certain classified NSA surveillance programs. The media revealed those 
unauthorized disclosures beginning in June 2013. These disclosures are now risking, and in 
some cases causing, the exceptionally grave damage to national security that the Government has 
previously identified to the Court, including the loss of valuable intelligence and, specifically, 
information that may assist in detecting or preventing a future mass casualty terrorist attack. 

5. The Government responded to the recent unlawful disclosures by officially 
acknowledging the existence of certain programs because of the importance of correcting 
inaccurate information to the public about those programs, despite the harm to national security 
that such an official acknowledgement would cause. In sum. the Government confirmed the 
existence and some information concerning ( 1 ) the telephony metadata program, in which the 
NSA obtains, pursuant to orders issued by the Foreign Intelligence Surveillance Court (“FISC”), 
telephone company business records in bulk containing certain non-content information about 
phone calls made, such as the phone numbers dialed, and the date, time, and duration of the calls, 
and uses that information to identify unknown terrorist operatives; (2) a previous program of 
bulk collection of certain Internet metadata, such as the “to” and “from” lines of an email and the 
date and time the email was sent, also authorized by the FISC and also for counter-terrorism 

1 This declaration supplants all prior privilege assertions. In order to focus on the 
information which remains subject to this privilege assertion, this declaration does not repeat or 
address all topics that were addressed in prior declarations. The Court is respectfully referred to 
prior declarations for additional background. 
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1 


purposes; and (3) certain information about the Government’s use of authority conferred by 


2 


Section 702 of the Foreign Intelligence Surveillance Act (“FISA”), to collect, for foreign 


3 


intelligence purposes, certain communications of non-U. S. persons located outside the United 


4 


States, pursuant to approval of the FISC. 


5 


6. In addition, the Government has now declassified the existence of the two 


6 


metadata collection activities that were conducted prior to FISC authorization, under presidential 


7 


authorizations issued by President Bush in the wake of the September 1 1 attacks. But for many 


8 


reasons vital to national security, the classified sources and methods (many of which the NS A 


9 


continues to utilize today), intelligence gathered, and operational details of what has been called 


10 


the President’s Surveillance Program (“PSP”) must remain protected from public disclosure to 


11 


avoid even greater damage to national security than is already occurring as a result of the 


12 


unlawful disclosures. To the extent this information is at risk of disclosure in litigating 


13 


plaintiffs’ claims, the Government continues to assert the state secrets privilege and applicable 


14 


statutory privileges over that information. In particular, and in unclassified terms, the privilege 


15 


applies to information about whether plaintiffs themselves have been subject to any of the 


16 


surveillance activities they complain about; classified intelligence sources and methods of the 


17 


NSA programs at issue, such as the identities of any telecommunications carriers and facilities 


18 


that provided assistance to the NSA; and intelligence collected under the programs.. 


19 


7. For the reasons detailed below and further detailed in my classified declaration. 


20 


the Government continues to assert the state secrets privilege in these cases, as described in my 


21 

22 


declaration, notwithstanding the Government’s recent official disclosures. 


23 

24 
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III. BACKGROUND 

A. The National Security Agency 

8. The NSA was established by Presidential Directive in 1952 as a separately 
organized agency within the Department of Defense. The NSA’s foreign intelligence mission 
includes the responsibility to collect, process, analyze, produce, and disseminate signals 
intelligence (“SIGINT”) information, of which COMINT is a significant subset, for (a) national 
foreign intelligence purposes, (b) counterintelligence purposes, and (c) the support of military 
operations. See Executive Order 12333, § 1.7(c), as amended. 2 

9. SIGINT consists of three subcategories: (1) COMINT; (2) electronic intelligence 
(“ELINT”); and (3) foreign instrumentation signals intelligence (“FISINT”). COMINT is 
defined as “all procedures and methods used in the interception of communications and the 
obtaining of information from such communications by other than the intended recipients.” 1 8 
U.S.C. § 798. COMINT includes information derived from the interception of foreign and 
international communications, such as voice, facsimile, and computer-to-computer information 
conveyed via a number of means. ELINT is technical intelligence information derived from 
foreign non-communications electromagnetic radiations except atomic detonation or radioactive 
sources — in essence, radar systems affiliated with military weapons platforms ( e g ., anti-ship) 
and civilian systems (e.g., shipboard and air traffic control radars). FISINT is derived from the 



Executive Order 12333, reprinted as amended in 50 U.S.C § 3001 note, generally 
describes the NSA’s authority to collect foreign intelligence that is not subject to the FISA 
definition of electronic surveillance, including activities undertaken abroad. Section 1 .7(c) of 
E.O. 12333, as amended, specifically authorizes the NSA to “Collect (including through 
clandestine means), process, analyze, produce, and disseminate signals intelligence information 
for foreign intelligence and counterintelligence purposes to support national and departmental 
missions.” 
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1 intercept of foreign electromagnetic emissions associated with the testing and operational 

2 deployment of non-U. S. aerospace, surface, and subsurface systems. 

3 1 0. The NSA’s SIGINT responsibilities include establishing and operating an 

4 effective unified organization to conduct SIGINT activities set forth in EO 12333, § 1.7(c)(2), as 

5 amended. In performing its SIGINT mission, the NSA has developed a sophisticated worldwide 

6 SIGINT collection network that acquires, among other things, foreign and international 

7 electronic communications and related information. The technological infrastructure that 

8 supports the NSA’s foreign intelligence information collection network has taken years to 

9 develop at a cost of billions of dollars and untold human effort. It relies on sophisticated 

10 collection and processing technology. 

11 11. There are two primary reasons for gathering and analyzing foreign intelligence 

12 information. The first, and most important, is to gain information required to direct U.S. 

13 resources as necessary to counter external threats and in support of military operations. The 

14 second reason is to obtain information necessary to the formulation of U.S. foreign policy. 

15 Foreign intelligence information provided by the NSA is thus relevant to a wide range of 

16 important issues, including military order of battle; threat warnings and readiness; arms 

17 proliferation; international terrorism; counter-intelligence; and foreign aspects of international 

18 narcotics trafficking. 

19 12. The NSA’s ability to produce foreign intelligence information depends on its 

20 access to foreign and international electronic communications. Foreign intelligence produced by 

21 COMINT activities is an extremely important part of the overall foreign intelligence information 

22 available to the United States and is often unobtainable by other means. Public disclosure of 

23 either the capability to collect specific communications or the substance of the information 

24 derived from such collection itself can easily alert targets to the vulnerability of their 
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communications. Disclosure of even a single communication holds the potential of revealing 
intelligence collection techniques that are applied against targets around the world. Once alerted, 
targets can frustrate COMINT collection by using different or new encryption techniques, by 
disseminating disinformation, or by utilizing a different communications link. Such evasion 
techniques may inhibit access to the target's communications and therefore deny the United 
States access to information crucial to the defense of the United States both at home and abroad. 
COMINT is provided special statutory protection under 18 U.S.C. § 798, which makes it a crime 
to knowingly disclose to an unauthorized person classified information “concerning the 
communication intelligence activities of the United States or any foreign government.” 

B. September 1 1, 2001, and the al Qaeda Threat 

13. On September 1 1 , 2001 , the al Qaeda terrorist network launched a set of 
coordinated attacks along the East Coast of the United States. Four commercial jetliners, each 
carefully selected to be fully loaded with fuel for a transcontinental flight, were hijacked by al 
Qaeda operatives. Those operatives targeted the Nation’s financial center in New York with two 
of the jetliners, which they deliberately flew into the Twin Towers of the World Trade Center. 

Al Qaeda targeted the headquarters of the Nation’s Armed Forces, the Pentagon, with the third 
jetliner. Al Qaeda operatives were apparently headed toward Washington, D.C. with the fourth 
jetliner when passengers struggled with the hijackers and the plane crashed in Shanksville, 
Pennsylvania. The intended target of this fourth jetliner was most likely the White House or the 
Capitol, strongly suggesting that al Qaeda’s intended mission was to strike a decapitating blow to 
the Government of the United States — to kill the President, the Vice President, or Members of 
Congress. The attacks of September 1 1 resulted in approximately 3,000 deaths — the highest 
single-day death toll from hostile foreign attacks in the Nation’s history. In addition, these 
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15. Asa result of the unprecedented attacks of September 1 1 , 2001 , the United States 
found itself immediately propelled into a conflict with al Qaeda and its associated forces, a set of 
groups that possesses the evolving capability and intention of inflicting further attacks on the 
United States. That conflict is continuing today, at home as well as abroad. Moreover, the 
conflict against al Qaeda and its allies is a very different kind of conflict, against a very different 
enemy, than any other conflict or enemy the Nation has previously faced. Al Qaeda and its 
affiliates operate not as a traditional nation-state but as a diffuse, decentralized network of 
individuals, cells, and loosely associated, often disparate groups, that act sometimes in concert, 
sometimes independently, and sometimes in the United States, but always in secret — and their 
mission is to destroy lives and to disrupt a way of life through terrorist acts. Al Qaeda works in 
the shadows; secrecy is essential to al Qaeda’s success in plotting and executing its terrorist 
attacks. 

16. The 9/1 1 attacks posed significant challenges for the NSA’s signals intelligence 
mission. Global telecommunications networks, especially the Internet, have developed in recent 
years into a loosely interconnected system — a network of networks — that is ideally suited for the 
secret communications needs of loosely affiliated terrorist cells. Hundreds of Internet service 
providers, or “ISPs,” and other providers of communications services offer a wide variety of 
global communications options, often free of charge. 

1 7. Our efforts against al Qaeda and its affiliates therefore present critical challenges 

for the Nation’s communications intelligence capabilities. First, in this type of conflict, more so 

than in any other we have ever faced, communications intelligence is essential to our ability to 

identify the enemy and to detect and disrupt its plans for further attacks on the United States. 

Communications intelligence often is the only means we have to learn the identities of particular 

individuals who are involved in terrorist activities and the existence of particular terrorist threats. 
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Second, at the same time that communications intelligence is more important than ever, the 
decentralized, non-hierarchical nature of the enemy and their sophistication in exploiting the 
agility of modem telecommunications make successful communications intelligence more 
difficult than ever. It is against this backdrop that the risks presented by this litigation should be 
assessed, in particular the risks of disclosing NSA sources and methods implicated by the claims 
being raised. 

C. Plaintiffs’ Allegations and the Government’s Prior Assertions of Privilege 

18. In the course of my official duties, I have been advised of the Jewel and Shubert 
cases, and I have reviewed the allegations raised in this litigation, including the Complaint filed 
in the Jewel action on September 1 8, 2008. and the Second Amended Complaint (“SAC”) filed 
in the Shubert action on May 8, 2012. In sum, plaintiffs allege that, after the 9/1 1 attacks, the 
NSA received presidential authorization to engage in “dragnet” communications surveillance in 
concert with major telecommunications companies. See, e.g., Jewel Compl. 2-3, Shubert 
SAC Ifl] 1-7. Plaintiffs allege that, pursuant to presidential authorization and with the assistance 
of telecommunication companies (including AT&T and Verizon), the NSA indiscriminately 
intercepted the content and obtained the communications records of millions of ordinary 
Americans. Plaintiffs seek relief in this litigation that would prohibit such collection activities, 
even though they were later transitioned to FISC-authorized programs and remain so to the 
extent the programs continue. 

19. In addition, I am familiar with the previous classified declarations filed in these 

cases in September and November 2012. In those declarations, the DNI and the NSA asserted 

the state secrets privilege over the following broad categories of information: (1) any 

information that may tend to confirm or deny whether particular individuals, including plaintiffs, 

have been subject to the alleged NSA intelligence activities; and (2) any information concerning 
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NSA intelligence activities, sources, or methods that may relate to or be necessary to adjudicate 
plaintiffs' allegations, including allegations that the NSA, with the assistance of 
telecommunications carriers such as AT&T and Verizon, indiscriminately intercepts the content 
of communications and collects the communication records of millions of Americans as part of 
an alleged program authorized by the President after 9/11. This latter category included (i) 
information concerning the scope and operation of the now inoperative Terrorist Surveillance 
Program (“'I SP”) regarding the interception of the content of certain international 
communications reasonably believed to involve a member or agent of al Qaeda or an affiliated 
terrorist organization. 4 and any other information related to demonstrating that the NSA does not 
otherwise engage in the content surveillance “dragnet” alleged by plaintiffs; (ii) information 
concerning whether or not the NSA obtained from telecommunications companies such as 
AT&T and Verizon communication transactional records as alleged in the complaints; and (iii) 
information that may tend to confirm or deny whether AT&T, Verizon, or other 
telecommunications carriers have provided assistance to the NSA in connection with any of the 
alleged activities. 

I). Official Disclosures Since September 2012 

20. In the wake of unauthorized disclosures, beginning in June 2013, about 
intelligence-gathering activities conducted by the NSA, the DNI, at the direction of the President 
and in light of the President’s transparency initiative, has declassified and made public certain 



4 In December 2005, then-President Bush publicly acknowledged the existence of a 
presidential ly-authorized NSA activity that later came to be called the TSP under which the NSA 
was authorized to intercept the content of specific international communications (i.e., to or from 
the United States) involving persons reasonably believed to be associated with al Qaeda and 
affiliated terrorist organizations. The term “content” is used herein to refer to the substance, 
meaning, or purport of a communication, as defined in 18 U.S.C. § 2510(8), as distinguished 
from the type of addressing or routing information referred to herein as “metadata.” 
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information about a number of sensitive programs undertaken under the authority of the FISA. 
Certain of the information that the DNI has declassified concerns the allegations raised in this 
litigation, and this information has been described in great detail in the classified declarations 
referenced above. In addition, the President has declassified the fact of the existence of two 
portions of the discontinued President’s Surveillance Program, which also concern the 
allegations at issue in this litigation. 1 summarize these various official disclosures below. 

1. Collection of Bulk Telephony Metadata Under Section 215 of the FISA 
21 . First, since May 2006, under a provision of the FISA known as Section 215 and 
codified at 50 U.S.C. § 1861. the NSA obtains, pursuant to orders of the FISC, bulk telephony 
metadata - business records created by telecommunications service providers that include such 
information as the telephone numbers placing and receiving calls, and the time and duration of 
those calls. 5 The Government has declassified and publicly disclosed a number of “primary” 
orders of the FISC to the Government authorizing it to carry out the bulk telephony metadata 
program. The Government has acknowledged only one “secondary” FISC order, however, to 
one telecommunications service provider (Verizon Business Network Services, Inc. (“VBNS”)), 
and for only one approximately 90-day period of time (from April 25, 2013 to July 19, 2013). 
The Government acknowledged this secondary order only after the order was disclosed 
unlawfully and without authorization. I'his is the only FISC order identifying any particular 
provider that has been declassified and, since the disclosure of this order in June 2013, the 
United States has continued to protect against any further disclosures of FISC orders directed at 



5 Under the terms of the FISC’s orders, the NSA is authorized to collect information 
including, as to each call, the telephone numbers that placed and received the call, other session- 
identifying information (e.g., International Mobile Subscriber Identity (IMSI) number. 
International Mobile station Equipment Identity (1MEI) number, etc.), trunk identifier, telephone 
calling card number, and the date, time, and duration of a call. 
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any provider under the telephony metadata program. While the authentication of that order 
means that the identity of one participating provider has been officially acknowledged for the 
particular time period of that order, the order was limited to VBNS. did not identify any other 
provider, did not relate to any other corporate component of Verizon other than VBNS, and was 
of limited duration (expiring on July 19, 2013). There has been no official acknowledgement of 
whether or not VBNS assisted the NSA with the FISC telephony metadata program either before 
or after the period covered by the April 2013 order, or whether VBNS continues to participate in 
the program. The identities of the providers that furnish assistance to the NSA under the 
telephony metadata program, including VBNS, as to any other time period other than the 
approximately 90-day duration of that order, have not been declassified and remains currently 
and properly classified. 

22. The Government also disclosed that it does not collect, listen to, or record the 
content of any call under this program, nor does it collect the name, address, or financial 
information of any subscriber, customer, or party to a call, or cell site locational information. 

The Government obtains FISC orders under this program by submitting detailed applications 
from the Federal Bureau of Investigation (“FBI”) explaining that the records are sought for 
investigations to protect against international terrorism that concern specified foreign terrorist 
organizations identified in the application. As required by Section 215, each application contains 
a statement of facts showing that there are reasonable grounds to believe that the metadata as a 
whole are relevant to the investigations of these organizations. 

23. ITie NSA stores and analyzes this information under carefully controlled 

circumstances and under stringent supervision and oversight by all three branches of 

Government. The vast majority of the metadata are never seen by any person. Rather, the NSA 

has been authorized to query the archived data solely with identifiers, typically telephone 
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numbers, for which there are facts giving rise to a reasonable, articulable suspicion (“RAS”) that 
the number is associated with one or more of the foreign terrorist organizations that are the 
subject of FBI investigations previously identified to the FISC. Where the identifier is 
reasonably believed to be used by a U.S. person, the NSA may not make the RAS determination 
solely based on activities protected by the First Amendment. 

24. The accessible results of an approved query are limited to records of 
communications within three “hops” from the seed identifier. 6 That is, the query results may 
only include identifiers having a direct contact with the seed (the first “hop”), identifiers having a 
direct contact with the first “hop” identifiers (the second “hop”), and identifiers having a direct 
contact with second “hop” identifiers (the third “hop”). By querying the metadata using the RAS 
standard, NSA intelligence analysts are able to: (1) detect domestic identifiers calling foreign 
identifiers associated with one of the foreign terrorist organizations and discover identifiers that 
the foreign identifiers are in contact with; (2) detect foreign identifiers associated with a foreign 
terrorist organization calling into the U.S. and discover which domestic identifiers are in contact 
with the foreign identifiers; and (3) detect possible terrorist-related communications occurring 
between communicants located inside the U.S. 

25. The Government has also publicly disclosed FISC orders and opinions concerning 
various failures to fully implement and comply with FISC-ordered procedures for the telephony 
metadata collection program. These compliance incidents were due to human error and 
technological issues. In 2009, the Government reported these problems to the FISC (and 
Congress) and remedied them, and the FISC (after temporarily suspending the Government’s 



6 A “seed” is an initial identifier used to generate a query. 
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authority to query the database without the court’s approval) reauthorized the program in its 
current form. 

2. Bulk C Collection of Internet Metadata 

26. Second, the Government has recently declassified and acknowledged the 
existence of FISC-authorized bulk collection of Internet metadata carried out under the “pen 
register, trap and trace” (“PRTT”) provision of the FISA. The data collected included certain 
routing, addressing, and signaling information such as the “to” and “from” lines of an email and 
the date and time the email was sent, but not the content of an email or the subject line. Certain 
telecommunications service providers were compelled to provide this transactional information, 
which the NSA analyzed to obtain foreign intelligence information. ITie FISC’s orders 
authorizing this collection required the Government to comply with minimization procedures 
limiting the retention and dissemination of the metadata, including a requirement of a reasonable, 
articulable suspicion that selection terms used to query the bulk data were associated with 
foreign terrorist organizations. 7 This program of bulk Internet metadata collection was 
terminated in 201 1, because it did not meet the operational expectations the NSA had for it. 

3. Collection of Communications Content Pursuant to Section 702 of FISA. 

27. Third, the Government has publicly revealed certain information about its use of 
authority conferred by Section 702 of the FISA to collect, for foreign intelligence purposes, 
certain communications of non-U. S. persons located outside the United States, pursuant to 
approval of the FISC. Section 702 facilitates the targeted acquisition of foreign intelligence 



7 Similar to the telephony metadata program ( see supra ^ 34), the Government has also 
publicly disclosed FISC orders and opinions concerning various failures to fully implement and 
comply with FISC-ordered procedures for the Internet metadata collection program. These 
compliance incidents were due to human error and technological issues. In 2009, the 
Government reported these problems to the FISC (and Congress) and remedied them. 
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information concerning foreign targets located outside the United States under court oversight. 
Electronic communication service providers are compelled to supply information to the 
Government pursuant to authorized directives issued by the Attorney General and the DNI. 

28. Once targeted surveillance under Section 702 has been authorized, the NSA takes 
the lead in tasking relevant telephone and electronic communications selectors to target specific 
non-U. S. persons reasonably believed to be located outside the United States. Consistent with 
the statute, the NSA’s targeting procedures require that there be an appropriate, documented 
foreign intelligence purpose for the acquisition and that the selector be used by a non-U. S. 
person reasonably believed to be located outside the United States. 

29. Once a target has been approved, the NSA uses two means to acquire the target’s 
electronic communications. First, it acquires such communications directly from compelled 
U.S. -based providers. This has been publicly referred to as the NSA’s PRISM collection. 

Second, in addition to collection directly from providers, the NSA performs “upstream 
collection” of Internet communications. The NSA has strict minimization and dissemination 
procedures, and as is the case with the telephony metadata program, the NSA’s Section 702 
collection activities are subject to extensive oversight by all three branches of the Government. 

30. As with the telephony metadata program, the Government has also disclosed 
compliance incidents involving its Section 702 collection activities. In an opinion issued on 
October 3, 201 1, the FISC found the NSA’s proposed minimization procedures as applied to the 
NSA’s upstream collection of Internet transactions containing multiple communications, or 
“MCTs,” deficient. Oct. 3, 201 1 FISC Op., 201 1 WL 10945618. In response, the NSA modified 
its proposed procedures and the FISC subsequently determined that the NSA adequately 
remedied the deficiencies such that the procedures met the applicable statutory and constitutional 
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requirements, and allowed the collection to continue. Aug. 24, 2012 FISC Op., 2012 WL 
9189263, at *2-3; Nov. 30, 201 1 FISC Op., 201 1 WL 10947772. 

4. Prcsidentially Authorized NSA Activities After 9/1 1 

31. In December 2005 then-President Bush acknowledged the existence of a 
presidentially-authorized NSA activity called the I SP under which NSA was authorized to 
intercept the content of specific international communications (i.e., to or from the United States) 
involving persons reasonably believed to be associated with al Qaeda and affiliated terrorist 
organizations. Other intelligence activities were authorized by the President after the 9/1 1 
attacks in a single authorization and were subsequently authorized under orders issued by the 
FISC. In light of the declassification decisions described above concerning the NSA’s 
collection of telephony and Internet metadata and targeted content collection under FISC orders, 
the President has determined to publicly disclose the fact of the existence of those activities prior 
to the FISC orders, pursuant to presidential authorization. Accordingly, certain limited 
information concerning these activities has now been declassified: 

32. Starting on October 4, 2001 , President Bush authorized the Secretary of Defense 
to employ the capabilities of the Department of Defense, including the NSA, to collect foreign 
intelligence by electronic surveillance in order to detect and prevent acts of terrorism within the 
United States. President Bush authorized the NSA to collect: (1) the contents of certain 
international communications, a program that was later referred to as the TSP; and (2) telephony 
and Internet non-content metadata in bulk, subject to various conditions. 

33. President Bush issued authorizations approximately every 30-60 days. Although 
the precise terms changed over time, each presidential authorization required the minimization ot 
information collected concerning American citizens to the extent consistent with the effective 
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accomplishment of the mission of detection and prevention of acts of terrorism within the United 
States. The NSA applied additional internal constraints on the presidentially-authorized 
activities. 

34. Over time, the presidentially-authorized activities transitioned to the authority of 
the FISA. ITie collection of communications content pursuant to presidential authorization 
ended in January 2007 when the Government transitioned the TSP to the authority of the FISA 
and under the orders of the FISC. In August 2007, Congress enacted the Protect America Act 
(“PAA”) as a temporary measure. The PAA, which expired in February 2008, was replaced by 
the FISA Amendments Act of 2008 (“FAA”), which was enacted in July 2008 and remains in 
effect today. Today, content collection is conducted pursuant to section 702 of the FISA. The 
metadata activities also were transitioned to orders of the FISC. The bulk collection of telephony 
metadata transitioned to the authority of the FISA in May 2006 and is collected pursuant to 
Section 21 5 of FISA. The bulk collection of Internet metadata was transitioned to the authority 
of the FISA in July 2004 and was collected pursuant to Section 402 of FISA. In December 2011, 
the Government decided not to seek reauthorization of the bulk collection of Internet metadata. 
IV. INFORMATION SUBJECT TO ASSERTIONS OF PRIVILEGE 

35. While information about the existence of the components of the PSP has now 
been declassified, specific operational details concerning the program’s scope, operation, the 
sources and methods it utilized, and intelligence it produced remain properly classified and are 
subject to the DNI’s state secrets privilege assertion and my own assertion of NSA’s statutory 
privilege in this declaration. In general and unclassified terms, the DNI’s assertion of the state 
secrets privilege and my statutory privilege assertion encompasses the following categories of 
still-classified information and properly protected national security information concerning NSA 
activities: 
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A. Persons Subject to Intelligence Activities: information that would tend to confirm 
or deny whether particular individuals, including the named plaintiffs, have been 
subject to any NS A intelligence activities; 



B. Operational Information Concerning NSA Intelligence Activities; information 
concerning the scope and operational details of NSA intelligence activities that may 
relate to or be necessary to adjudicate plaintiffs’ allegations, including: 



( 1 ) Communications Content Collection : information concerning the 
scope or operational details of NSA intelligence activities that may relate 
to or be necessary to adjudicate plaintiffs’ claims that the NSA 
indiscriminately intercepts the content of communications, see, e.g.. Jewel 
Complaint Tfll 9, 10, 73-77; Shubert SAC 1fl| 1, 2, 7, 64-70, including: 

(a) TSP Information: information concerning the scope 
and operation of the now inoperative TSP regarding the 
interception of the content of certain international 
communications reasonably believed to involve a 
member or agent of al Qaeda or an affiliated terrorist 
organization; 

(b) FISA Section 702: information concerning 
operational details related to the collection of 
communications under FISA section 702; and 

(c) Any other information related to demonstrating that 
the NSA has not otherwise engaged in the content- 
surveillance dragnet that the plaintiffs allege. 



(2) Communications Records Collection : information concerning the 
scope or operational details of NSA intelligence activities that may relate 
to or be necessary to adjudicate plaintiffs’ claims regarding the NSA’s 
bulk collection of telephony and Internet non-content communications 
records (“metadata"), see, e g ., Jewel Complaint Ifl] 10, 11, 13, 73-77, 82- 
97; Shubert SAC ffl 102; 
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C. Telecommunication Provider Identities; information that may tend to 

confirm or deny whether AT&T or Verizon (and to the extent relevant or necessary, 
any other telecommunications carrier) has provided assistance to the NS A in 
connection with any intelligence activity, including the collection of communications 
content or non-content transactional records alleged to be at issue in this litigation. 

V. HARM OF DISCLOSURE OF PRIVILEGED INFORMATION 

A. Information Concerning Whether Plaintiffs Have Been Subject 
to the Alleged NSA Activities 

36. The first major category of information as to which I am supporting the DNI’s 
assertion of privilege, and asserting the NSA’s own statutory privilege, concerns information as 
to whether particular individuals, including the named plaintiffs in this lawsuit, have been 
subject to alleged NSA intelligence activities. As set forth below and in my classified 
declaration, confirmation or denial of such information by the NSA reasonably could be 
expected to cause exceptionally grave damage to the national security. The named plaintiffs in 
the Jewel and Shubert cases allege that the content of their own telephone and Internet 
communications has been and continues to be subject to unlawful search and seizure by the 
NSA, along with the content of communications of millions of ordinary Americans. Further, 



* Specifically, the Jewel plaintiffs allege that pursuant to a presidentially authorized 
program after the 9/1 1 attacks, the NSA, with the assistance of AT&T, acquired and continues to 
acquire the content of phone calls, emails, instant messages, text messaged, web and other 
communications, both international and domestic, of millions of ordinary Americans - 
“practically every American who uses the phone system or the Internet” - including the 
plaintiffs. See Jewel Comply 7, 9, 10; see also id. at 39-97. The Shubert plaintiffs allege 
that the contents of “virtually every telephone, Internet and email communication sent from or 
received within the United States since shortly after September 11, 2001,” including plaintiffs’ 
communications, are being “searched, seized, intercepted, and subject to surveillance without a 
warrant, court order or any other lawful authorization in violation of the Foreign Intelligence 
Surveillance Act of 1 978, 50 U.S.C. § 181 0.” See Shubert SAC f 1 ; see also id. 5, 7. 
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the named plaintiffs allege that the NS A has been and is continuing to collect and analyze the 
private telephone and Internet transaction records of millions of Americans, with the assistance 
of telecommunication carriers, again including information concerning the plaintiffs’ telephone 
and Internet communications. 9 

37. As a matter of course, the NSA cannot publicly confirm or deny whether any 
individual is or has been subject to intelligence-gathering activities because to do so would tend 
to reveal actual targets or subjects. The harm of revealing the identities of persons who are the 
actual targets or subjects of foreign intelligence gathering is relatively straightforward. If an 
individual knows or suspects he is a target or subject of U.S. intelligence activities, he would 
naturally tend to alter his behavior to take new precautions against such scrutiny. In addition, 
revealing who is not a target or subject of intelligence gathering would indicate who has avoided 
surveillance or collection and what may be a secure channel for communication. Such 
information could lead an actual or potential adversary, secure in the knowledge that he is not 
under government scrutiny, to help a hostile foreign adversary convey information; alternatively, 
such a person may be unwittingly utilized or even forced to convey information through a secure 
channel to a foreign adversary. Revealing which channels are free from surveillance and which 
are not would also reveal sensitive intelligence methods and thereby could help any adversary 
evade detection and capitalize on limitations in NSA’s capabilities. Similar harms would result 
from confirming or denying whether a person’s communications have been subject to collection 

9 Specifically, the Jewel plaintiffs allege that the NSA has “unlawfully solicited and 
obtained from telecommunications companies the complete and ongoing disclosure of the private 
telephone and internet transactional records” of millions of ordinary Americans, including 
plaintiffs. See Jewel Compl. Ifl] 7, 10, 1 1, 13. 82-97. They further claim the NSA analyzes this 
information. Id. 11. The Shubert plaintiffs allege that “NSA now monitors huge volumes of 
records of domestic emails and Internet searches... [and] receives this so-called ‘transactional’ 
data from. . .private companies. ..” See Shubert SAC ^ 1 02. 
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even where it may be assumed a person is law-abiding and not likely to be an actual target or 
subject of such activity. For example, if the NSA were to confirm that specific individuals have 
not been targets of or subject to collection (i.e., whether their communications have been 
intercepted), but later refuse to comment (as it would have to) in a situation involving an actual 
target or subject, an actual or potential adversary of the United States could likewise seek such 
confirmation or denial and then easily deduce by comparing such responses that the person in the 
latter instance is or has been a target of or subject to surveillance or other intelligence-gathering 
activity. In addition, disclosure of whether a person’s communications have or have not been 
targeted or intercepted through the targeting of a third party would reveal whether a particular 
channel of communication is secure and also reveal to third-party targets whether their own 
communications may be secure. 

B. Operational Information Concerning NSA Intelligence 
Activities 

38. 1 am also supporting the DNl’s assertion of privilege and asserting the NSA’s 

statutory privilege over any other still-classified facts concerning NSA intelligence activities, 
sources, or methods that may relate to or be necessary to litigate the plaintiffs’ claims and 
allegations, including that: (1) the NSA is indiscriminately intercepting the content of 
communications of millions of ordinary Americans, see e.g., Jewel Complaint 7, 9, 10; 
Shubert SAC ^fl[ 1, 5, 7; and (2) that the NSA is collecting the private telephone and Internet 
transactional records of Americans with the assistance of telecommunications carriers, again 
including information concerning the plaintiffs’ telephone and Internet communications. See 
Jewel Complaint 7, 10, 11, 13, 82-97; see Shubert SAC ^ 102. As described above, the scope 
of the Government’s privilege assertion includes but is not limited to still-classified information 
concerning (1 ) the collection of communication content under the now inoperative TSP as well 
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as pursuant to authority of FISA Section 702, and any other NSA activities that would be at risk 
of disclosure or required in demonstrating that the NSA has not engaged in content “dragnet" 
surveillance activities that plaintiffs allege; and (2) information that may relate to or be necessary 
to adjudicate plaintiffs’ claims regarding the NSA’s bulk collection of telephony and Internet 
communication records. As set forth below and in my classified declaration, the disclosure of 
such information would cause exceptionally grave harm to national security. 

1. Information Concerning Plaintiffs’ Content Surveillance Allegations 
39. After the existence of the TSP was officially acknowledged in December 2005, 
the Government stated that this activity was limited to the interception of the content of certain 
communications for which there were reasonable grounds to believe that: (1 ) such 
communication originated or terminated outside the United States; and (2) a party to such 
communication is a member or agent of al Qaeda or an affiliated terrorist organization. 
Nonetheless, plaintiffs’ allege that the NSA indiscriminately intercepts the content of 
communications of millions of ordinary Americans. See e.g., Jewel Complaint 7, 9, 10; see 
Shubert SAC ^flj 1, 5, 7. As the Government has also previously stated, H) plaintiffs’ allegation 
that the NSA has undertaken indiscriminate surveillance of the content 1 1 of millions of 
communications sent or received by people inside the United States after 9/1 1 under the TSP is 
false. But in order to disprove plaintiffs’ claim that the NSA indiscriminately collected the 



111 See Public Declaration of Dennis Blair, Director of National Intelligence, 15 (April 
3, 2009) (Dkt. 18-3 in Jewel action (08-cv-4373); Public Declaration of Deborah A. Bonanni. 
National Security Agency ^ 14 (Dkt. 18-4 in Jewel action (08-cv-4373); Public Declaration of 
Dennis Blair. Director of National Intelligence, ]| 15 (October 30, 2009) (Dkt. 680-1 in Shubert 
action (MDL 06-cv-1791); Public Declaration of Lt. Gen. Keith B. Alexander, National Security 
Agency H 19 (Dkt. 680-1 in Shubert action (MDL 06-cv- 1791). 

1 'Again, the term “content” is used herein to refer to the substance, meaning, or purport 
of a communication as defined in 18 U.S.C. § 2510(8). 
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specifics of its content collection activities. Under the TSP, the NSA was directed pursuant to 
presidential authorization to intercept the content of only those international telephone and 
Internet communications for which there were reasonable grounds to believe that such 
communications involved a member or agent of al Qaeda or an affiliated terrorist organization. 
To the extent the NSA must demonstrate that content surveillance under the TSP was so limited, 
and was not plaintiffs’ alleged content “dragnet,” or demonstrate that the NSA has not otherwise 
engaged in the alleged content “dragnet,” highly classified NSA intelligence sources and 
methods about the operation of the TSP and current NSA intelligence activities (including under 
FISA Section 702) would be subject to disclosure or the risk of disclosure. I he disclosure of 
whether and to what extent the NSA utilizes certain intelligence sources and methods would 
reveal to foreign adversaries the NSA’s capabilities, or lack thereof, enabling them to either 
evade particular channels of communications that are being monitored, or exploit channels of 
communication that are not subject to NSA activities, in either case risking exceptionally grave 
damage to national security. As set forth below and in my classified declaration, a range of 
operational details concerning the TSP, as well as other NSA sources and methods, remains 
properly classified and privileged from disclosure, and could not be revealed to address 
plaintiffs’ content “dragnet” allegations. 

40. Authorization of the TSP was intended to address an important gap in NSA’s 

intelligence collection activities — namely, that significant changes in communications 

technology since the enactment of the FISA in 1978 meant that the NSA faced great difficulties 

in identifying foreign terrorist operatives who were communicating with individuals within the 

United States. FISA established the framework for court approval of the U.S. Government’s 

efforts to conduct foreign intelligence surveillance of individuals in the United States. When 
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FISA was enacted in 1978, most international communications to or from the United States were 
transmitted via satellite or radio technology. Congress intentionally excluded the vast majority 
of satellite or radio communications from the definition of “electronic surveillance” in the FISA. 
See 50 U.S.C. §1801(0- 

41 . Since the time FISA was enacted, sweeping advances in modem 
telecommunications technology upset the balance struck by Congress in 1978. By 2001, most 
international communications to or from the United States were carried on a wire and many 
domestic communications had increasingly become wireless. As a result of this change in 
communications technology, the NSA’s collection from inside the United States of international 
communications (previously carried primarily via radio transmission) had shrunk considerably 
and the Government was forced to prepare FISA applications if it wished to collect the 
communications of non-U. S. persons located overseas. These circumstances presented a 
significant concern in the exceptional circumstances after 9/11. 

2. Information Concerning Plaintiffs’ Communications Records Collection 
Allegations 

42. Plaintiffs also allege that the NSA is collecting the private telephone and Internet 
transaction records of millions of Americans, again including information concerning plaintiffs’ 
telephone and Internet communications. See, e.g., Jewel Complaint ^H( 7, 10, 11, 13, 8, 13, 82- 
97; see Shubert SAC 102. To address these allegations would risk or require disclosure of 
NSA sources and methods and reasonably could be expected to cause exceptionally grave 
damage to national security. While the Government has declassified the existence of the 
telephony and Internet metadata collections, and some information concerning those programs as 
authorized by the FISC, significant operational details concerning these activities remain 
properly classified, including the identity of communication providers who may have assisted in 

Unclassified Declaration of Frances J. Fleisch, National Security Agency 26 

Jewel, v. NSA. (No. 08-cv-4873-JSW); Shubert v. Obama (07-CV-0693-JSW) (M:06-cv-1791) 




1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

tl 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 



this collection, and other sources and method of collection and analysis. As set forth below and 
in my classified declaration, disclosure of this information reasonably could be expected to cause 
grave damage to national security. 

(a) Collection of Bulk Telephony Metadata 

43. As with the operational details concerning the NSA’s collection of 
communications content, 1 am supporting the DNI’s state secrets privilege assertion, and 
asserting NSA's statutory privilege, over still-classified information that may relate to or be 
necessary to litigate plaintiffs’ claims as they relate to the alleged collection of telephony 
metadata. 

44. The still classified operational details concerning the collection of telephony 
metadata include, but are not necessarily limited to, whether metadata of plaintiffs’ telephone 
communications were actually collected by the NSA from plaintiffs’ particular communications 
providers; whether any metadata of plaintiffs’ telephone communications, if collected, were 
viewed or analyzed by anyone at the NSA; information demonstrating the scope of the telephony 
metadata collection program; and information demonstrating the need for and effectiveness of 
the program 

45. As set forth in this declaration, following the unauthorized disclosure in June 
2013 of one FISC order issued as part of the telephony metadata program, the Government 
confirmed the authenticity of one order, issued on April 25, 2013, by the FISC to a particular 
Verizon Communications subsidiary, Verizon Business Network Services (VBNS), thereby 
confirming the participation of VBNS in the program for the duration of that order 
(approximately 90 days). TTiis is the only FISC order identifying any particular provider under 
this program that has been declassified, and since the disclosure of this order in June 2013, the 
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United States has not confirmed or denied the past or current participation of any specific 
provider in the telephony metadata program apart from the participation of VBNS for the 
approximately 90 day duration of the now-expired April 25, 2013, FISC order. As explained in 
my classified declaration, the continued protection of whether or not, or to what extent, a 
particular telecommunications provider assisted the NSA under FISC order or otherwise remains 
an extraordinarily sensitive and significant matter that the Government continues to protect to 
avoid even greater harm to national security than has already occurred since June 2013. 

46. (b) Internet Metadata Collection 

47. 1 am also supporting the DNFs privilege assertion, and asserting the NSA’s 
statutory privilege, over still-classified operational details concerning the NSA’s bulk collection 
of Internet metadata under presidential authorization.. Disclosure of these details, which are set 
forth in my classified declaration, reasonably could be expected to cause exceptionally grave 
damage to national security, for the reasons set forth in my classified declaration. 

3. Information Concerning Whether or Not Any Specific Carrier Provided 
Assistance to the NSA 

48. 1 am also supporting the DNFs state secrets privilege assertion, and asserting 
NSA’s statutory privilege, over information relating to which carriers have assisted the NSA 
under presidential authorization and other authorities. The Jewel plaintiffs and three of the 
Shubert plaintiffs allege that they are customers of AT&T, and that AT&T participated in the 
alleged intelligence-gathering activities that the plaintiffs seek to challenge. Additionally, at 
least one Shubert plaintiff also claims to be a customer of Verizon, and that Verizon similarly 
participated in the alleged intelligence-gathering activities that the plaintiffs seek to challenge. 
The harm from officially acknowledging whether or not any specific carrier has assisted the NSA 
is significant, as set forth in my classified declaration, and continues to exist notwithstanding the 
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recent official disclosures. While the Government has declassified some information concerning 
the nature and scope of the programs described above and in my classified declaration — 
including that it collects telephony and Internet metadata in bulk, from multiple 
telecommunication providers -- and has also confirmed the authenticity of a single now-expired 
FISC order issued to a single carrier that had been unlawfully disclosed, it has not otherwise 
declassified information concerning the identities of companies that are or were subject to FISC 
orders under NSA intelligence-gathering programs, or have otherwise assisted the NSA. 

IV. CONCLUSION 

49. The United States has an overwhelming interest in detecting and thwarting further 
plots to perpetrate mass-casualty attacks by al Qaeda and other terrorist organizations. The 
United States has already suffered one massive attack that killed thousands, disrupted the 
Nation’s financial center for days, and successfully struck at the command and control center for 
the Nation’s military. It remains a key objective of al Qaeda and other terrorist groups to carry 
out a massive attack in the United States that could result in a significant loss of life, as well as 
have a devastating impact on the U.S. economy. 

50. As set forth above, terrorist organizations around the world seek to use our own 
communications infrastructure against us as they secretly attempt to infiltrate agents into the 
United States, waiting to attack at a time of their choosing. One of the greatest challenges the 
United States confronts in the ongoing effort to prevent another catastrophic terrorist attack 
against the U.S. Homeland is the critical need to gather intelligence quickly and effectively. 

Time is of the essence in preventing terrorist attacks, and the Government faces significant 
obstacles in finding and tracking terrorist operatives as they manipulate modem technology in an 
attempt to communicate while remaining undetected. The NSA sources, methods, and activities 
described herein are vital tools in this effort. 
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I 



5 1 . For the foregoing reasons. I support the DNFs assertion of the state secrets 
privilege and statutory privilege to prevent the disclosure of the information described herein and 
detailed herein. I also assert a statutory privilege under Section 6 of the National Security Act 
w ith respect to the information described herein which concerns the functions of the NSA. I 
respectfully request that the Court protect that information from disclosure to prevent 
exceptionally grave damage to the national security of the United States. 

I declare under penalty of perjury that the foregoing is true and correct. 

DATE: Id otO' !3 A Qf XUU U 

Frances J. Fleisch 
National Security Agency 
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